Senior Specialist IT Security and Compliance

Nestlé; Ciudad de México; Hybrid; MXN 900,000 - 1,200,000; Full time

Benefits offered by this job

Health insurance

Restaurant card

Mobility plan

Hybrid working environment

Job summary

Nestlé SA in Mexico City is seeking a Senior Specialist IT Security and Compliance to support the market's ISMS, GRC program, and cybersecurity risk management. You will partner with business and global security teams to identify, assess, and mitigate information security risks while ensuring adherence to Nestlé policies and regulatory requirements.

The role advises on security controls, governance processes, and risk mitigation strategies, driving continuous improvement across security and

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Audit, Risk Management, or related discipline.
• 5+ years of experience in Information Security, Cybersecurity, Governance, Risk & Compliance (GRC), Audit, Compliance, Privacy, or related field.
• Experience with information security frameworks such as ISO 27001, NIST, COBIT, CIS Controls, or ITIL.
• Experience performing risk assessments, compliance reviews, audits, and remediation activities.
• Proven ability to manage stakeholders and influence outcomes across technical and business teams.
• Strong analytical, communication, and project management skills.
• Professional security, risk, or audit certifications (CISSP, CISA, CISM, CRISC, ISO 27001) preferred.
• Experience with Archer, ServiceNow, or similar GRC platforms preferred.

Responsibilities

• Security Governance: Support and continuously improve the market's ISMS, GRC program, and cybersecurity governance, including documentation, risk registers, and rollout of global security standards.
• Risk & Compliance: Identify, assess, and report security, privacy, and technology risks using the Nestlé Cyber Risk Framework, and drive corrective actions with business and IT partners.
• Cloud Compliance: Co-own the market Cloud Compliance Framework, ensuring applications and cloud services are secure and compliant throughout their lifecycle.
• Audit Support: Coordinate internal, external, and regulatory audits, providing evidence and tracking findings through to closure.
• Metrics & Improvement: Oversee vulnerability management governance, report SCIs and KRIs, and contribute to dashboards and executive reporting that drive continuous improvement.
• Stakeholder Partnership: Act as a trusted advisor to business and technology teams, and lead security awareness and capability-building initiatives.

Skills

Security governance

Risk & compliance

Cloud security

Audit coordination

Stakeholder management

Communication

Project management

Security awareness

Education

Bachelor's degree in Cybersecurity/Information Security

Tools

Archer

ServiceNow

Job description

Senior Specialist IT Security and Compliance

Senior Specialist IT Security and Compliance

Position Snapshot:

• Type of Contract: Full Time
• Function and Stream:
• Type of work: Hybrid
• Work Language: Fluent Business English

The role:

The Senior Specialist, Information Security & Compliance plays a key role in supporting the market's Information Security Management System (ISMS), Governance, Risk & Compliance (GRC) program, and cybersecurity risk management activities. This position partners closely with business, technology, and global security teams to ensure information security risks are identified, assessed, managed, and monitored in accordance with Nestlé policies, industry standards, and regulatory requirements.

The role serves as a trusted advisor to stakeholders, providing guidance on security controls, compliance obligations, risk mitigation strategies, and governance processes while driving continuous improvement across the security and compliance landscape.

What you’ll do:

As a Senior Specialist, Information Security and Compliance, you will:

• Security Governance: Support and continuously improve the market's ISMS, GRC program, and cybersecurity governance, including documentation, risk registers, and the rollout of global security standards.
• Risk & Compliance: Identify, assess, and report security, privacy, and technology risks using the Nestlé Cyber Risk Framework, and drive corrective actions with business and IT partners.
• Cloud Compliance: Co-own the market Cloud Compliance Framework, ensuring applications and cloud services are secure and compliant throughout their lifecycle.
• Audit Support: Coordinate internal, external, and regulatory audits, providing evidence and tracking findings through to closure.
• Metrics & Improvement: Oversee vulnerability management governance, report SCIs and KRIs, and contribute to dashboards and executive reporting that drive continuous improvement.
• Stakeholder Partnership: Act as a trusted advisor to business and technology teams, and lead security awareness and capability-building initiatives.

We offer you:

We offer more than just one job. We put people first and inspire you to become the best version of yourself.

• Great benefits including salary and a comprehensive social benefits package. We have one of the best pension plans on the market, as well as flexible remuneration with tax advantages: health insurance, restaurant card, mobility plan, etc.
• Personal and professional growth through ongoing training and constant career opportunities reflecting our conviction that people are our most important asset.
• Hybrid working environment with flexible working scheme. Our state-of-the-art campus is dog friendly and equipped with a medical center, canteen and areas to co-create network and chill!
• Recreation activities such as yoga, Zumba, etc. and a wide range of volunteering activities.

Join our global team of IT professionals at Nestlé, driving daily innovation and leveraging cutting-edge technologies to address digital opportunities. Grow professionally in a dynamic and impactful environment, collaborating with business partners worldwide to deliver integrated technology solutions!

What will make you a great fit?

• Bachelor's degree in Cybersecurity, Information Technology, Audit, Risk Management, Business Administration, or related discipline.
• 5+ years of experience in Information Security, Cybersecurity, Governance, Risk & Compliance (GRC), Audit, Compliance, Privacy, or a related field.
• Experience with information security frameworks such as ISO 27001, NIST, COBIT, CIS Controls, or ITIL.
• Experience performing risk assessments, compliance reviews, audits, and remediation activities.
• Proven ability to manage stakeholders and influence outcomes across technical and business teams.
• Strong analytical, communication, and project management skills.
• Professional security, risk, or audit certifications (CISSP, CISA, CISM, CRISC, ISO 27001) preferred.
• Experience with Archer, ServiceNow, or similar GRC platforms preferred.

Not a 100% match? No worries! Nestlé supports your personal growth with customized development solutions.

We are Nestlé, the largest food and beverage company with brands including KitKat, Nescafé, Maggi, Purina, among many others. We are approximately 275,000 employees strong, motivated by the purpose of enhancing the quality of life and contributing to a healthier future. Our values are rooted in respect: respect for ourselves, respect for others, respect for diversity and respect for our future. With more than CHF 94.4billion sales in 2022, we have an expansive presence, with 344factories in 77countries. Want to learn more? Visit us at www.nestle.com .

We encourage the diversity of applicants across gender, age, ethnicity, nationality, sexual orientation, social background, religion or belief and disability.